update 2026-05-10 09:48:30

nikki/files/scripts/debug.sh

@@ -0,0 +1,248 @@
+#!/bin/sh
+
+. "$IPKG_INSTROOT/etc/nikki/scripts/include.sh"
+
+enabled=`uci get nikki.config.enabled`
+
+if [ "$enabled" == "0" ]; then
+	uci set nikki.config.enabled=1
+	uci commit nikki
+	/etc/init.d/nikki restart
+fi
+
+echo \
+"
+# Nikki Debug Info
+## system
+\`\`\`shell
+`
+cat /etc/openwrt_release
+`
+\`\`\`
+## kernel
+\`\`\`
+`
+uname -a
+`
+\`\`\`
+## application
+\`\`\`
+`
+if [ -x "/bin/opkg" ]; then
+	opkg list-installed "nikki"
+	opkg list-installed "luci-app-nikki"
+elif [ -x "/usr/bin/apk" ]; then
+	apk list -I "nikki"
+	apk list -I "luci-app-nikki"
+fi
+`
+\`\`\`
+## config
+\`\`\`json
+`
+ucode -S -e '
+import { cursor } from "uci";
+
+const uci = cursor();
+
+const config = uci.get_all("nikki");
+const result = {};
+
+for (let section_id in config) {
+	const section = config[section_id];
+	const section_type = section[".type"];
+	if (result[section_type] == null) {
+		result[section_type] = [];
+	}
+	push(result[section_type], section);
+}
+for (let section_type in result) {
+	for (let section in result[section_type]) {
+		delete section[".anonymous"];
+		delete section[".type"];
+		delete section[".name"];
+		delete section[".index"];
+	}
+}
+if (exists(result, "mixin")) {
+	for (let x in result["mixin"]) {
+		if (exists(x, "api_secret")) {
+			x["api_secret"] = "*";
+		}
+	}
+}
+if (exists(result, "authentication")) {
+	for (let x in result["authentication"]) {
+		if (exists(x, "password")) {
+			x["password"] = "*";
+		}
+	}
+}
+if (exists(result, "subscription")) {
+	for (let x in result["subscription"]) {
+		if (exists(x, "url")) {
+			x["url"] = "*";
+		}
+	}
+}
+if (exists(result, "lan_access_control")) {
+	for (let x in result["lan_access_control"]) {
+		if (exists(x, "ip")) {
+			for (let i = 0; i < length(x["ip"]); i++) {
+				x["ip"][i] = "*";
+			}
+		}
+		if (exists(x, "ip6")) {
+			for (let i = 0; i < length(x["ip6"]); i++) {
+				x["ip6"][i] = "*";
+			}
+		}
+		if (exists(x, "mac")) {
+			for (let i = 0; i < length(x["mac"]); i++) {
+				x["mac"][i] = "*";
+			}
+		}
+	}
+}
+delete result["status"];
+delete result["editor"];
+delete result["log"];
+print(result);
+'
+`
+\`\`\`
+## profile
+\`\`\`json
+`
+ucode -S -e '
+import { popen } from "fs";
+
+function desensitize_proxies(proxies) {
+	for (let x in proxies) {
+		if (exists(x, "server")) {
+			x["server"] = "*";
+		}
+		if (exists(x, "servername")) {
+			x["servername"] = "*";
+		}
+		if (exists(x, "sni")) {
+			x["sni"] = "*";
+		}
+		if (exists(x, "port")) {
+			x["port"] = "*";
+		}
+		if (exists(x, "ports")) {
+			x["ports"] = "*";
+		}
+		if (exists(x, "port-range")) {
+			x["port-range"] = "*";
+		}
+		if (exists(x, "uuid")) {
+			x["uuid"] = "*";
+		}
+		if (exists(x, "private-key")) {
+			x["private-key"] = "*";
+		}
+		if (exists(x, "public-key")) {
+			x["public-key"] = "*";
+		}
+		if (exists(x, "token")) {
+			x["token"] = "*";
+		}
+		if (exists(x, "username")) {
+			x["username"] = "*";
+		}
+		if (exists(x, "password")) {
+			x["password"] = "*";
+		}
+	}
+}
+
+function desensitize_profile() {
+	let profile = {};
+	const process = popen("yq -M -p yaml -o json /etc/nikki/run/config.yaml");
+	if (process) {
+		profile = json(process);
+		if (exists(profile, "secret")) {
+			profile["secret"] = "*";
+		}
+		if (exists(profile, "authentication")) {
+			profile["authentication"] = [];
+		}
+		if (exists(profile, "proxy-providers")) {
+			for (let x in profile["proxy-providers"]) {
+				if (exists(profile["proxy-providers"][x], "url")) {
+					profile["proxy-providers"][x]["url"] = "*";
+				}
+				if (exists(profile["proxy-providers"][x], "payload")) {
+					desensitize_proxies(profile["proxy-providers"][x]["payload"]);
+				}
+			}
+		}
+		if (exists(profile, "proxies")) {
+			desensitize_proxies(profile["proxies"]);
+		}
+		process.close();
+	}
+	return profile;
+}
+
+print(desensitize_profile());
+'
+`
+\`\`\`
+## ip rule
+\`\`\`
+`
+ip rule list
+`
+\`\`\`
+## ip route
+\`\`\`
+TPROXY: 
+`
+ip route list table "$(uci get nikki.routing.tproxy_route_table)"
+`
+
+TUN: 
+`
+ip route list table "$(uci get nikki.routing.tun_route_table)"
+`
+\`\`\`
+## ip6 rule
+\`\`\`
+`
+ip -6 rule list
+`
+\`\`\`
+## ip6 route
+\`\`\`
+TPROXY: 
+`
+ip -6 route list table "$(uci get nikki.routing.tproxy_route_table)"
+`
+
+TUN: 
+`
+ip -6 route list table "$(uci get nikki.routing.tun_route_table)"
+`
+\`\`\`
+## nftables
+\`\`\`
+`
+nft list table inet nikki
+`
+\`\`\`
+## service
+\`\`\`json
+`
+/etc/init.d/nikki info
+`
+\`\`\`
+"
+
+if [ "$enabled" == "0" ]; then
+	uci set nikki.config.enabled=0
+	uci commit nikki
+	/etc/init.d/nikki restart
+fi